CVE-2024-45414

The HTTPD binary in multiple ZTE routers has a stack-based buffer overflow vulnerability in webPrivateDecrypt function. This function is responsible for decrypting RSA encrypted ciphertext, the encrypted data is supplied base64 encoded. The decoded ciphertext is stored on the stack without checki...

CVE-2024-45413

The HTTPD binary in several ZTE routers contains a stack-based buffer overflow vulnerability within the rsa_decrypt function. This function serves as an API wrapper for LUA to decrypt RSA encrypted ciphertext, but it fails to verify the length of the decrypted data before storing it on the stack....